Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/3138352e3233342e3231352e302f32342d3234203d3e20323035363531.roa
File: 3138352e3233342e3231352e302f32342d3234203d3e20323035363531.roa (raw, json)
Hash identifier: u9cyvnlGLEX4oz+ceY5QdLznYmCzLY/j15yZexUClT0=
Subject key identifier: 5E:72:30:25:62:DF:78:A1:2B:A0:AF:5B:06:0E:56:D6:78:51:D1:F9
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 318C7E9955EC57FE43A00554D1DB23A29C9C5054
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/3138352e3233342e3231352e302f32342d3234203d3e20323035363531.roa
Signing time: Sun 03 Dec 2023 21:38:20 +0000
ROA not before: Sun 03 Dec 2023 21:33:20 +0000
ROA not after: Sun 01 Dec 2024 21:38:20 +0000
asID: 205651
IP address blocks: 185.234.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:8c:7e:99:55:ec:57:fe:43:a0:05:54:d1:db:23:a2:9c:9c:50:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Dec 3 21:33:20 2023 GMT
Not After : Dec 1 21:38:20 2024 GMT
Subject: CN=5E72302562DF78A12BA0AF5B060E56D67851D1F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:32:67:b0:62:41:ff:52:b8:86:20:ca:a4:
73:12:ab:09:f6:1a:4f:f4:70:3b:b2:8b:8e:e6:c6:
3f:67:0f:78:cd:45:bb:8c:a6:15:01:dc:fc:2a:97:
c2:e0:26:13:6d:2f:7a:61:8a:a7:2d:2f:e3:f5:7a:
e4:9e:24:44:4f:0c:51:60:fe:1c:33:fa:15:63:2c:
b1:35:35:1d:9b:f1:92:26:e6:2e:5a:e4:13:68:65:
4a:65:5a:fb:24:d0:f0:f1:50:22:f6:7e:41:bc:bd:
4e:86:ef:e6:65:8a:58:dc:57:e0:d1:0f:e3:53:15:
a7:70:a6:86:6d:5d:ea:b2:d3:88:f6:92:51:2c:e8:
d6:ea:7d:73:a7:81:20:d1:80:21:f2:86:12:e4:d3:
c1:c4:f3:f0:0d:d4:9a:08:50:63:6a:db:21:29:53:
bc:8d:18:61:df:f2:5a:30:3c:49:79:52:a0:c1:0f:
a4:9f:d6:c9:19:24:40:92:de:be:b7:bf:bf:70:8b:
73:3a:3c:64:44:ac:c0:83:5b:27:e3:5e:24:fa:a5:
f9:d8:0d:d2:d0:1f:2c:94:73:59:37:81:f1:c2:bb:
73:a3:2b:5a:6d:09:fe:a2:aa:ab:aa:cf:b8:7f:af:
f1:12:16:b5:2d:9a:77:47:8e:f4:7c:5a:15:12:bc:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:30:25:62:DF:78:A1:2B:A0:AF:5B:06:0E:56:D6:78:51:D1:F9
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/3138352e3233342e3231352e302f32342d3234203d3e20323035363531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.215.0/24
Signature Algorithm: sha256WithRSAEncryption
64:de:45:fc:70:78:43:52:32:df:67:f5:5a:28:1e:a1:78:e9:
ce:c8:65:c3:f0:03:a5:45:c7:e9:e6:a8:ab:91:96:3a:ee:0d:
dc:53:93:92:32:e1:ea:13:a5:d3:af:5c:82:62:9f:d8:98:06:
31:49:ba:dd:6c:94:93:36:e2:e8:7d:13:df:d8:41:3b:30:89:
6b:17:f0:02:53:66:69:54:34:f1:de:48:14:14:94:19:09:1e:
59:e9:55:b2:e4:e8:c7:1f:85:88:52:7f:20:4e:66:d3:01:31:
d6:e7:c9:34:b6:89:23:78:e3:73:cb:59:a9:cb:a1:1e:4a:ac:
cd:6c:a9:85:5e:a2:a1:da:d8:e8:2a:ea:1b:db:9a:55:d3:12:
8b:bd:32:62:9b:b2:af:2e:1d:8c:4c:09:11:13:c4:bc:81:e1:
ce:d6:00:be:1b:af:c0:ed:d9:dc:a8:d4:51:b6:6b:c5:21:3c:
5c:cd:95:9d:72:6e:a4:a9:3a:f5:24:02:80:57:cc:a5:ac:08:
fa:47:ef:25:f4:5a:6c:10:ad:a4:12:9c:8f:1e:91:64:bb:e4:
5b:aa:1d:26:8b:17:fd:ba:cb:f2:99:33:8e:44:25:45:90:e7:
45:49:a3:32:83:9d:41:c2:64:48:c6:ad:48:95:74:a8:2a:90:
38:74:b3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 21:55:09 2023 by rpki-client on console-ams.rpki-client.org